Distributed photovoltaic grid-connected safety protection system and method

Abstract

The invention provides a distributed photovoltaic grid-connected security protection system and method, and belongs to the field of network security protection. The system comprises an information acquisition terminal, a semantic coding module and a distributed photovoltaic grid-connected monitoring master station, the information acquisition terminal is used for acquiring operation data of the distributed photovoltaic power station and the equipment formed by the distributed photovoltaic power station; the semantic coding module is used for receiving the operation data, carrying out semantic coding and encryption on the operation data, and sending the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on a wireless transmission mode; and the distributed photovoltaic grid-connected monitoring master station is used for receiving the encrypted coded data, decrypting and decoding the encrypted coded data to obtain decoded data, and monitoring and analyzing the operation of the distributed photovoltaic power station based on the decoded data. According to the invention, both the transmission real-time performance and safety of distributed photovoltaic grid-connected monitoring can be considered.

Description

Technical Field

[0001] The present invention relates to the field of network security protection technology, and in particular to a distributed photovoltaic grid-connected security protection system and method. Background Art

[0002] With the large-scale development and utilization of photovoltaic power generation, more and more distributed photovoltaic power stations are connected to the distribution network. Although the capacity of distributed photovoltaic power stations is small, there are many sites and they cover a wide range. After a large number of distributed photovoltaic power stations are connected to the grid, if the photovoltaic power station information cannot be sent to the grid control centers at all levels in time, it will cause safety hazards to the stable operation of the grid. Therefore, it is very necessary to establish a distributed photovoltaic grid-connected monitoring system to collect information on the power generation of distributed photovoltaic power stations in the region, and realize real-time monitoring and scheduling of distributed photovoltaic power stations to meet the needs of photovoltaic power generation access to the grid and ensure the stability and security of the grid.

[0003] Due to the large number of distributed photovoltaic points, wireless information transmission is currently mostly used when building distributed photovoltaic grid-connected monitoring systems, especially the wireless public network provided by various communication operators. However, when using the wireless public network, in order to ensure the communication security of the power system, it is usually necessary to add vertical encryption authentication devices, forward and reverse isolation devices, and safe access areas between the information collection terminal and the control center of the distributed photovoltaic power station. This multi-level encryption authentication strategy may introduce a certain transmission delay, which is not conducive to the real-time monitoring and scheduling of distributed photovoltaic power stations. Summary of the invention

[0004] The embodiments of the present invention provide a distributed photovoltaic grid-connected safety protection system and method to solve the problem that both transmission real-time performance and safety cannot be taken into account when constructing a distributed photovoltaic grid-connected monitoring system.

[0005] In a first aspect, an embodiment of the present invention provides a distributed photovoltaic grid-connected safety protection system, including: an information collection terminal, a semantic coding module and a distributed photovoltaic grid-connected monitoring master station;

[0006] The information collection terminal is used to collect the operating data of the distributed photovoltaic power station and its component equipment;

[0007] The semantic coding module is used to receive the operation data, semantically encode and encrypt the operation data, and send the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission;

[0008] The distributed photovoltaic grid-connected monitoring master station is used to receive the encrypted coded data, decrypt and decode the encrypted coded data to obtain decoded data, and monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data.

[0009] In a possible implementation, the semantic encoding module is specifically used to:

[0010] Obfuscating the operation data according to the type, collection time and collection location of the operation data to obtain obfuscated data;

[0011] Performing semantic encoding on the obfuscated data based on a semantic encoder to obtain encoded data;

[0012] The coded data is encrypted to obtain encrypted coded data.

[0013] In a possible implementation, performing data obfuscation on the operation data according to the type, collection time, and collection location of the operation data to obtain obfuscated data includes:

[0014] Taking the type of the operation data as a feature dimension, taking the collection time of the operation data as a time dimension, taking the collection location of the operation data as a space dimension, and constructing a multidimensional tensor of the operation data according to the feature dimension, the time dimension, and the space dimension;

[0015] The multidimensional tensor is arranged based on a preset feature arrangement, a preset time arrangement, and a preset space arrangement to obtain obfuscated data.

[0016] In a possible implementation, encrypting the coded data to obtain encrypted coded data includes:

[0017] Performing verification calculation on the coded data according to a first preset verification algorithm to obtain a verification code of the coded data, recorded as a first verification code;

[0018] The coded data and the first check code are encrypted to obtain encrypted coded data.

[0019] In a possible implementation manner, encrypting the coded data and the first check code to obtain the encrypted coded data includes:

[0020] Performing verification calculation on the obfuscated data according to a second preset verification algorithm to obtain a verification code of the obfuscated data, which is recorded as a second verification code;

[0021] The coded data, the first check code and the second check code are encrypted to obtain encrypted coded data.

[0022] In a possible implementation, the distributed photovoltaic grid-connected monitoring master station is specifically used for:

[0023] Decrypting the encrypted coded data to obtain decrypted data;

[0024] Decoding the decrypted data based on a semantic decoder to obtain initial decoded data;

[0025] The initial decoded data is deobfuscated based on a preset obfuscation scheme to obtain decoded data, wherein the preset obfuscation scheme is an arrangement of the type, collection time and collection position of the operation data.

[0026] In a possible implementation, the type of the operation data is used as a feature dimension, the collection time of the operation data is used as a time dimension, and the collection location of the operation data is used as a space dimension. The preset obfuscation scheme includes a preset feature arrangement, a preset time arrangement, and a preset space arrangement.

[0027] De-obfuscating the initial decoded data based on a preset obfuscation scheme to obtain decoded data includes:

[0028] The initial decoded data is inversely arranged based on the preset feature arrangement, the preset time arrangement and the preset space arrangement to obtain decoded data.

[0029] In a possible implementation, after decrypting the encrypted coded data to obtain decrypted data, the following steps are included:

[0030] extracting the encoded data and the first check code from the decrypted data;

[0031] Performing verification calculation on the coded data according to a first preset verification algorithm to obtain a verification code of the coded data, which is recorded as a third verification code;

[0032] Determining whether the third verification code is the same as the first verification code;

[0033] If the third check code is the same as the first check code, decoding the decrypted data based on the semantic decoder to obtain initial decoded data;

[0034] If the third verification code is different from the first verification code, an alarm prompt message indicating that the operating data is wrong is fed back.

[0035] In a possible implementation, the distributed photovoltaic grid-connected safety protection system further includes: extracting a second verification code from the decrypted data;

[0036] After determining that the third verification code is the same as the first verification code, the method further includes:

[0037] Performing verification calculation on the initial decoded data according to a second preset verification algorithm to obtain a verification code of the initial decoded data, recorded as a fourth verification code;

[0038] Determining whether the fourth verification code is the same as the second verification code;

[0039] If the fourth check code is the same as the second check code, de-obfuscating the initial decoded data based on a preset obfuscation scheme to obtain decoded data;

[0040] If the fourth verification code is different from the second verification code, an alarm prompt message indicating that the operating data is wrong is fed back.

[0041] In a second aspect, an embodiment of the present invention provides a distributed photovoltaic grid-connected safety protection method, which is applied to the distributed photovoltaic grid-connected safety protection system described in the first aspect or any possible implementation of the first aspect, and the method includes:

[0042] The information collection terminal collects the operating data of the distributed photovoltaic power station and its component equipment;

[0043] The semantic coding module receives the operation data, semantically encodes and encrypts the operation data, and sends the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission;

[0044] The distributed photovoltaic grid-connected monitoring master station receives the encrypted coded data, decrypts and decodes the encrypted coded data to obtain decoded data, and monitors and analyzes the operation of the distributed photovoltaic power station based on the decoded data.

[0045] The embodiment of the present invention provides a distributed photovoltaic grid-connected safety protection system and method, which is constituted by an information collection terminal, a semantic coding module and a distributed photovoltaic grid-connected monitoring master station, wherein the information collection terminal is used to collect the operation data of the distributed photovoltaic power station and its component equipment; the semantic coding module is used to receive the operation data, semantically encode and encrypt the operation data, and send the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission; the distributed photovoltaic grid-connected monitoring master station is used to receive the encrypted coded data, decrypt and decode the encrypted coded data to obtain decoded data, and monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data. Thus, the semantic coding module is used to replace the longitudinal encryption authentication device, the forward and reverse isolation device or the safe access area between the information collection terminal and the control center, thereby reducing the number of encryption authentications between the information collection terminal and the control center, and using the semantic coding function of the semantic coding module itself to realize the encryption of the information collected by the information collection terminal, thereby improving the real-time performance of the distributed photovoltaic grid-connected monitoring while taking into account the safety, thereby ensuring the real-time monitoring and scheduling of the distributed photovoltaic power station. BRIEF DESCRIPTION OF THE DRAWINGS

[0046] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0047] Figure 1 is a schematic diagram of a distributed photovoltaic grid-connected safety protection system provided by an embodiment of the present invention;

[0048] Figure 2 It is a flow chart for implementing the distributed photovoltaic grid-connected safety protection method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0049] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present invention. However, it should be clear to those skilled in the art that the present invention may be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present invention.

[0050] In order to make the purpose, technical solutions and advantages of the present invention more clear, specific embodiments will be described below in conjunction with the accompanying drawings.

[0051] Figure 1 Schematic diagram of a distributed photovoltaic grid-connected safety protection system provided by an embodiment of the present invention. Figure 1 As shown, the system includes: an information collection terminal 1, a semantic coding module 2 and a distributed photovoltaic grid-connected monitoring master station 3.

[0052] The information collection terminal 1 is used to collect the operating data of the distributed photovoltaic power station and its component equipment.

[0053] The semantic coding module 2 is used to receive the operation data, semantically encode and encrypt the operation data, and send the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission.

[0054] The distributed photovoltaic grid-connected monitoring master station 3 is used to receive the encrypted coded data, decrypt and decode the encrypted coded data to obtain decoded data, and monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data.

[0055] like Figure 1As shown, the information collection terminal 1 can be set in the DC power supply part (that is, the photovoltaic module part), the inverter part, the junction box part, the booster station part, etc. of the distributed photovoltaic power station. This embodiment does not limit the specific setting position of the information collection terminal 1, and the information collection terminal 1 can be set at the required position according to actual needs. Exemplarily, the information collection terminal 1 can collect the voltage, current, power, efficiency, etc. of the photovoltaic module, or the voltage, current, power, etc. of the inverter, or the current, power, frequency, etc. of the junction box, or the voltage, current, power, etc. of the booster station, and these data are sent to the semantic coding module 2 as monitored data.

[0056] According to actual needs, the semantic coding module 2 can be set to one, two or more. When at least two semantic coding modules 2 are set, at least two semantic coding modules 2 can receive operating data of distributed photovoltaic power stations and their component equipment at different locations to reduce the computational pressure of a single semantic coding module 2.

[0057] The operation data is semantically encoded and encrypted through the semantic encoding module 2. The operation data can be encrypted once using the semantic encoding power of the semantic encoding module 2 itself, and then the semantically encoded data is encrypted again through the encryption algorithm, thereby ensuring the security of the operation data during transmission.

[0058] Considering that the information collection terminal 1 usually collects the operation data of a distributed photovoltaic power station and its component equipment for a period of time, semantic coding by the semantic coding module 2 can also reduce the amount of transmitted data to a certain extent.

[0059] The operation data that has been semantically encoded and encrypted by the semantic encoding module 2 can be sent to the distributed photovoltaic grid-connected monitoring master station 3 based on wireless transmission or wired transmission. At this time, the semantic encoding module 2 is mainly used to ensure the security of data transmission between the information collection terminal 1 and the distributed photovoltaic grid-connected monitoring master station 3, thereby reducing the number of encryption authentications between the information collection terminal and the control center, which is conducive to improving the real-time transmission of distributed photovoltaic grid-connected monitoring.

[0060] The embodiment of the present invention forms a distributed photovoltaic grid-connected safety protection system through an information collection terminal, a semantic coding module and a distributed photovoltaic grid-connected monitoring master station, wherein the information collection terminal is used to collect the operation data of the distributed photovoltaic power station and its component equipment; the semantic coding module is used to receive the operation data, semantically encode and encrypt the operation data, and send the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission; the distributed photovoltaic grid-connected monitoring master station is used to receive the encrypted coded data, decrypt and decode the encrypted coded data to obtain decoded data, and monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data. Thus, the semantic coding module is used to replace the longitudinal encryption authentication device, the forward and reverse isolation device or the safe access area between the information collection terminal and the control center, thereby reducing the number of encryption authentications between the information collection terminal and the control center, and using the semantic coding function of the semantic coding module itself to realize the encryption of the information collected by the information collection terminal, thereby improving the real-time performance of the distributed photovoltaic grid-connected monitoring while taking into account the safety, thereby ensuring the real-time monitoring and scheduling of the distributed photovoltaic power station.

[0061] In one embodiment, the semantic encoding module 2 may be specifically used for:

[0062] The operation data is obfuscated according to the type, collection time and collection location of the operation data to obtain obfuscated data; the obfuscated data is semantically encoded based on a semantic encoder to obtain encoded data; and the encoded data is encrypted to obtain encrypted encoded data.

[0063] In this embodiment, in order to further ensure the security of the operating data during the transmission process, before using the semantic encoder of the semantic encoding module 2 for semantic encoding, the operating data is first obfuscated according to the type, collection time and collection location of the operating data to obtain obfuscated data, thereby preventing the operating data from being stolen by others when the semantic encoder model and encryption information are leaked.

[0064] Exemplarily, the semantic encoding module 2 can be specifically used for:

[0065] Taking the type of operation data as a feature dimension, the collection time of the operation data as the time dimension, and the collection location of the operation data as the space dimension, the operation data is constructed into a multidimensional tensor according to the feature dimension, time dimension, and space dimension; the multidimensional tensor is arranged based on a preset feature arrangement, a preset time arrangement, and a preset space arrangement to obtain obfuscated data.

[0066] In this embodiment, in order to avoid leakage of the process of data obfuscation for operating data, considering that the type of operating data collected is prioritized, and the time period and location of collection are generally determined in advance, it is considered to take the type of operating data as a feature dimension, the collection time of the operating data as the time dimension, and the collection location of the operating data as the space dimension, and construct a multidimensional tensor of the operating data according to the feature dimension, time dimension and space dimension, and then arrange the multidimensional tensor based on the predetermined preset feature arrangement, preset time arrangement and preset space arrangement to obtain obfuscated data, so that the distributed photovoltaic grid-connected monitoring master station 3 can perform reverse obfuscation based on the agreed preset feature arrangement, preset time arrangement and preset space arrangement in the subsequent reverse obfuscation, without the need to transmit the specific obfuscation scheme when performing data obfuscation, thereby further ensuring the security of data transmission.

[0067] Among them, when the multidimensional tensor is arranged based on the preset feature arrangement, the preset time arrangement and the preset space arrangement to obtain the obfuscated data, it can be performed in a certain execution order. For example, the multidimensional tensor is first arranged based on the preset feature arrangement to obtain the first obfuscated data, and then the first obfuscated data is arranged based on the preset time arrangement to obtain the second obfuscated data, and then the second obfuscated data is arranged based on the preset space arrangement to obtain the final obfuscated data. Or firstly, the multidimensional tensor is arranged based on the preset time arrangement to obtain the first obfuscated data, and then the first obfuscated data is arranged based on the preset feature arrangement to obtain the second obfuscated data, and then the second obfuscated data is arranged based on the preset space arrangement to obtain the final obfuscated data. The specific execution order can be set in advance, and this embodiment does not limit the specific execution order. As long as the subsequent distributed photovoltaic grid-connected monitoring master station 3 performs the corresponding execution order when performing reverse obfuscation.

[0068] Exemplarily, the semantic encoding module 2 can be specifically used for:

[0069] The coded data is verified and calculated according to a first preset verification algorithm to obtain a verification code of the coded data, which is recorded as a first verification code; the coded data and the first verification code are encrypted to obtain encrypted coded data.

[0070] In this embodiment, considering the possibility that the encrypted coded data may be attacked during the transmission process, before generating the encrypted coded data, a verification calculation is first performed on the coded data according to a first preset verification algorithm, and then the calculated first verification code and the coded data are encrypted together, so that it can be subsequently determined according to the first verification code whether the encrypted coded data is erroneous during the transmission process, thereby avoiding the distributed photovoltaic grid-connected monitoring master station 3 from monitoring and analyzing the operation of the distributed photovoltaic power station based on erroneous data, and then giving erroneous conclusions or control instructions, affecting the normal operation of the distributed photovoltaic power station.

[0071] Exemplarily, the semantic encoding module 2 can be specifically used for:

[0072] The obfuscated data is verified and calculated according to a second preset verification algorithm to obtain a verification code of the obfuscated data, which is recorded as a second verification code; the encoded data, the first verification code and the second verification code are encrypted to obtain encrypted encoded data.

[0073] In this embodiment, in addition to considering the possibility that the encrypted coded data may be attacked during the transmission process, the situation where the coded data generated by the semantic encoder is attacked or tampered with is further considered. Therefore, a verification calculation is performed on the obfuscated data before the semantic encoder performs semantic encoding based on a second preset verification algorithm, so that it can be determined whether the coded data is erroneous based on the second verification code later.

[0074] Exemplarily, the semantic encoding module 2 can also be used for:

[0075] The operation data is verified and calculated according to the third preset verification algorithm to obtain a verification code of the obfuscated data, which is recorded as the fifth verification code, and then the coded data, the first verification code, the second verification code and the fifth verification code are encrypted to obtain the encrypted coded data. In order to further consider the situation that the operation data or the obfuscated data may be attacked or tampered with, it is judged whether the obfuscated data and the operation data are wrong based on the fifth verification code.

[0076] It should be noted that the first preset check algorithm, the second preset check algorithm, and the third preset check algorithm may be the same or different. For example, the first preset check algorithm may be a message digest algorithm (Message Digest Algorithm MD5) or a cyclic redundancy check algorithm (Cyclic Redundancy Check, CRC), such as CRC32. The second preset check algorithm may be a CRC or a cumulative sum check algorithm, such as CRC16. This embodiment does not limit this.

[0077] In one embodiment, the distributed photovoltaic grid-connected monitoring master station 3 can be specifically used for:

[0078] Decrypt the encrypted coded data to obtain decrypted data; decode the decrypted data based on a semantic decoder to obtain initial decoded data; reversely obfuscate the initial decoded data based on a preset obfuscation scheme to obtain decoded data, wherein the preset obfuscation scheme is an arrangement of the type, collection time and collection location of the running data.

[0079] In this embodiment, corresponding to the execution process of the semantic coding module 2 in the above embodiment, the distributed photovoltaic grid-connected monitoring master station 3 executes its inverse process, by first decrypting the encrypted coded data, then decoding it based on the semantic decoder, and then performing reverse obfuscation based on the preset obfuscation scheme to obtain reconstructed decoded data, so as to monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data.

[0080] Exemplarily, taking the type of running data as a feature dimension, the collection time of the running data as a time dimension, and the collection location of the running data as a space dimension, the preset obfuscation scheme may include a preset feature arrangement, a preset time arrangement, and a preset space arrangement.

[0081] Accordingly, the distributed photovoltaic grid-connected monitoring master station 3 can be used for:

[0082] The initial decoded data is reversely arranged based on a preset feature arrangement, a preset time arrangement, and a preset space arrangement to obtain decoded data.

[0083] The preset feature arrangement, preset time arrangement and preset space arrangement in this embodiment correspond to the preset feature arrangement, preset time arrangement and preset space arrangement adopted by the semantic coding module 2 when performing data obfuscation. When the initial decoded data is reversely arranged based on the preset feature arrangement, preset time arrangement and preset space arrangement, this embodiment corresponds to the execution order of arranging the multidimensional tensor based on the preset feature arrangement, preset time arrangement and preset space arrangement when the semantic coding module 2 performs data obfuscation.

[0084] Exemplarily, when the semantic coding module 2 performs data obfuscation, it first arranges the multidimensional tensor based on a preset time arrangement to obtain the first obfuscated data, then arranges the first obfuscated data based on a preset feature arrangement to obtain the second obfuscated data, and then arranges the second obfuscated data based on a preset spatial arrangement to obtain the final obfuscated data. When the distributed photovoltaic grid-connected monitoring master station 3 performs inverse arrangement, it first inversely arranges the initial decoded data based on a preset spatial arrangement to obtain the first decoded data, then inversely arranges the first decoded data based on a preset feature arrangement to obtain the second decoded data, and then inversely arranges the second decoded data based on a preset time arrangement to obtain the final decoded data.

[0085] Exemplarily, the distributed photovoltaic grid-connected monitoring master station 3 can be used for:

[0086] The encoded data and the first check code in the decrypted data are extracted.

[0087] A checksum calculation is performed on the encoded data according to the first preset checksum algorithm to obtain a checksum of the encoded data, which is recorded as a third checksum.

[0088] Determine whether the third check code is the same as the first check code.

[0089] If the third check code is the same as the first check code, the decrypted data is decoded based on the semantic decoder to obtain initial decoded data.

[0090] If the third verification code is different from the first verification code, an alarm prompt message indicating that the operating data is wrong is fed back.

[0091] This embodiment corresponds to the case where the semantic coding module 2 encrypts the coded data and the first check code to obtain the encrypted coded data. In this embodiment, after the distributed photovoltaic grid-connected monitoring master station 3 decrypts the encrypted coded data to obtain the decrypted data, the corresponding coded data and the first check code can be extracted from the decrypted data. At this time, the coded data and the first check code extracted from the decrypted data can be regarded as the decoded data and the first check code. The decoded data and the first check code can be the same or different from the coded data and the first check code before the semantic coding module 2 encrypts. If it is assumed that the decoded data and the first check code are the same as the coded data and the first check code before the semantic coding module 2 encrypts, the third check code obtained by verifying and calculating the decoded data according to the first preset verification algorithm should be the same as the first check code. If the third check code is different from the first check code, it means that the encrypted coded data may be attacked or tampered with during the transmission process. At this time, the alarm prompt information representing the error of the operation data is fed back, which can avoid the distributed photovoltaic grid-connected monitoring master station 3 from monitoring and analyzing the operation of the distributed photovoltaic power station based on the wrong data, and then giving wrong conclusions or control instructions, affecting the normal operation of the distributed photovoltaic power station.

[0092] Exemplarily, the distributed photovoltaic grid-connected monitoring master station 3 can also be used for:

[0093] The second check code in the decrypted data is extracted.

[0094] After determining that the third check code is the same as the first check code, a check calculation is performed on the initial decoded data according to a second preset check algorithm to obtain a check code of the initial decoded data, which is recorded as a fourth check code.

[0095] Determine whether the fourth check code is the same as the second check code.

[0096] If the fourth check code is the same as the second check code, the initial decoded data is deobfuscated based on a preset obfuscation scheme to obtain decoded data.

[0097] If the fourth check code is different from the second check code, an alarm prompt message indicating that the operating data is wrong is fed back.

[0098] Similarly, this embodiment corresponds to the case where the semantic coding module 2 encrypts the coded data, the first check code and the second check code to obtain the encrypted coded data. In this embodiment, after the distributed photovoltaic grid-connected monitoring master station 3 decrypts the encrypted coded data to obtain the decrypted data, the corresponding coded data, the first check code and the second check code can be extracted from the decrypted data. At this time, the coded data, the first check code and the second check code extracted from the decrypted data can be regarded as the decoded data, the decoded first check code and the decoded second check code. If the third check code is the same as the decoded first check code, it means that the encrypted coded data has no error or tampering, but it cannot represent that the coded data has not been attacked or tampered with. If the coded data has been attacked or tampered with before encryption, even if the subsequently encrypted coded data has not been attacked or tampered with during the transmission process, it will provide the distributed photovoltaic grid-connected monitoring master station 3 with erroneous operation information.

[0099] Therefore, after determining that the third check code is the same as the first check code, this embodiment decodes the decrypted data based on the semantic decoder to obtain the initial decoded data, that is, the deobfuscated data. Then, the deobfuscated data is verified and calculated according to the second preset verification algorithm to obtain the fourth check code. If the fourth check code is the same as the second check code (that is, the second de-check code) obtained by verifying and calculating the obfuscated data before semantic encoding by the semantic encoding module 2, it means that the encoded data has not been attacked or tampered with. If the fourth check code is different from the second de-check code, it means that the encoded data may have been attacked or tampered with before encryption. At this time, the alarm prompt information characterizing the error in the operating data is fed back, which can avoid the distributed photovoltaic grid-connected monitoring master station 3 from monitoring and analyzing the operation of the distributed photovoltaic power station based on erroneous data, and then giving erroneous conclusions or control instructions, affecting the normal operation of the distributed photovoltaic power station.

[0100] When the semantic coding module 2 encrypts the coded data, the first check code, the second check code, and the fifth check code to obtain the encrypted coded data, the processing process of the distributed photovoltaic grid-connected monitoring master station 3 is similar to the above case and will not be repeated here.

[0101] Figure 2 The implementation flow chart of the distributed photovoltaic grid-connected safety protection method provided in the embodiment of the present invention is applied to the distributed photovoltaic grid-connected safety protection system of the above embodiment, and is described in detail as follows:

[0102] Step 201: The information collection terminal collects operating data of the distributed photovoltaic power station and its component equipment.

[0103] Exemplarily, the information collection terminal can collect the voltage, current, power, efficiency, etc. of the photovoltaic module, or the voltage, current, power, etc. of the inverter, or the current, power, frequency, etc. of the junction box, or the voltage, current, power, etc. of the booster station, and all of these data are sent to the semantic coding module as monitored data.

[0104] Step 202: The semantic coding module receives the operation data, performs semantic coding and encryption on the operation data, and sends the encrypted coding data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission.

[0105] In this embodiment, the operation data is semantically encoded and encrypted through the semantic coding module. The operation data can be encrypted once using the semantic coding power of the semantic coding module itself, and then the semantically encoded data can be encrypted again through the encryption algorithm, thereby ensuring the security of the operation data during transmission.

[0106] Step 203: the distributed photovoltaic grid-connected monitoring master station receives the encrypted coded data, decrypts and decodes the encrypted coded data to obtain decoded data, and monitors and analyzes the operation of the distributed photovoltaic power station based on the decoded data.

[0107] In this embodiment, the operating data that has been semantically encoded and encrypted by the semantic coding module can be sent to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission or wired transmission. At this time, the semantic coding module is mainly used to ensure the security of data transmission between the information collection terminal and the distributed photovoltaic grid-connected monitoring master station, thereby reducing the number of encryption authentications between the information collection terminal and the control center, which is conducive to improving the real-time transmission of distributed photovoltaic grid-connected monitoring.

[0108] The embodiment of the present invention forms a distributed photovoltaic grid-connected safety protection system through an information collection terminal, a semantic coding module and a distributed photovoltaic grid-connected monitoring master station, wherein the information collection terminal is used to collect the operation data of the distributed photovoltaic power station and its component equipment; the semantic coding module is used to receive the operation data, semantically encode and encrypt the operation data, and send the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission; the distributed photovoltaic grid-connected monitoring master station is used to receive the encrypted coded data, decrypt and decode the encrypted coded data to obtain decoded data, and monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data. Thus, the semantic coding module is used to replace the longitudinal encryption authentication device, the forward and reverse isolation device or the safe access area between the information collection terminal and the control center, thereby reducing the number of encryption authentications between the information collection terminal and the control center, and using the semantic coding function of the semantic coding module itself to realize the encryption of the information collected by the information collection terminal, thereby improving the real-time performance of the distributed photovoltaic grid-connected monitoring while taking into account the safety, thereby ensuring the real-time monitoring and scheduling of the distributed photovoltaic power station.

[0109] It should be understood that the order of execution of the steps in the above embodiment does not necessarily mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present invention.

[0110] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0111] Those of ordinary skill in the art will appreciate that the templates, units, and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

[0112] If the module / unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium. When the computer program is executed by the processor, it can implement the steps of the above-mentioned distributed photovoltaic grid-connected safety protection method embodiments. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium may include: any entity or device that can carry the computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory, random access memory, electrical carrier signal, telecommunication signal and software distribution medium.

[0113] The embodiments described above are only used to illustrate the technical solutions of the present invention, rather than to limit the same. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention, and should all be included in the protection scope of the present invention.

Claims

1. A distributed photovoltaic grid-connected safety protection system, characterized in that: include: Information collection terminal, semantic coding module and distributed photovoltaic grid-connected monitoring master station; The information collection terminal is used to collect the operating data of the distributed photovoltaic power station and its component equipment; The semantic coding module is used to receive the operation data, semantically encode and encrypt the operation data, and send the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission; The distributed photovoltaic grid-connected monitoring master station is used to receive the encrypted coded data, decrypt and decode the encrypted coded data to obtain decoded data, and monitor and analyze the operation of the distributed photovoltaic power station based on the decoded data.

2. The distributed photovoltaic grid-connected safety protection system according to claim 1 is characterized in that: The semantic encoding module is specifically used for: Obfuscating the operation data according to the type, collection time and collection location of the operation data to obtain obfuscated data; Performing semantic encoding on the obfuscated data based on a semantic encoder to obtain encoded data; The coded data is encrypted to obtain encrypted coded data.

3. The distributed photovoltaic grid-connected safety protection system according to claim 2 is characterized in that: Obfuscating the operation data according to the type, collection time and collection location of the operation data to obtain obfuscated data includes: Taking the type of the operation data as a feature dimension, taking the collection time of the operation data as a time dimension, taking the collection location of the operation data as a space dimension, and constructing a multidimensional tensor of the operation data according to the feature dimension, the time dimension, and the space dimension; The multidimensional tensor is arranged based on a preset feature arrangement, a preset time arrangement, and a preset space arrangement to obtain obfuscated data.

4. The distributed photovoltaic grid-connected safety protection system according to claim 2 is characterized in that: The coded data is encrypted to obtain encrypted coded data, including: Performing verification calculation on the coded data according to a first preset verification algorithm to obtain a verification code of the coded data, recorded as a first verification code; The coded data and the first check code are encrypted to obtain encrypted coded data.

5. The distributed photovoltaic grid-connected safety protection system according to claim 4 is characterized in that: Encrypting the coded data and the first check code to obtain encrypted coded data includes: Performing verification calculation on the obfuscated data according to a second preset verification algorithm to obtain a verification code of the obfuscated data, which is recorded as a second verification code; The coded data, the first check code and the second check code are encrypted to obtain encrypted coded data.

6. The distributed photovoltaic grid-connected safety protection system according to claim 1 is characterized in that: The distributed photovoltaic grid-connected monitoring master station is specifically used for: Decrypting the encrypted coded data to obtain decrypted data; Decoding the decrypted data based on a semantic decoder to obtain initial decoded data; The initial decoded data is deobfuscated based on a preset obfuscation scheme to obtain decoded data, wherein the preset obfuscation scheme is an arrangement of the type, collection time and collection position of the operation data.

7. The distributed photovoltaic grid-connected safety protection system according to claim 6, characterized in that: Taking the type of the operation data as a feature dimension, the collection time of the operation data as a time dimension, and the collection location of the operation data as a space dimension, the preset obfuscation scheme includes a preset feature arrangement, a preset time arrangement, and a preset space arrangement; De-obfuscating the initial decoded data based on a preset obfuscation scheme to obtain decoded data includes: The initial decoded data is inversely arranged based on the preset feature arrangement, the preset time arrangement and the preset space arrangement to obtain decoded data.

8. The distributed photovoltaic grid-connected safety protection system according to claim 6, characterized in that: After decrypting the encrypted coded data to obtain the decrypted data, the method comprises: extracting the encoded data and the first check code from the decrypted data; Performing verification calculation on the coded data according to a first preset verification algorithm to obtain a verification code of the coded data, which is recorded as a third verification code; Determining whether the third verification code is the same as the first verification code; If the third check code is the same as the first check code, decoding the decrypted data based on the semantic decoder to obtain initial decoded data; If the third verification code is different from the first verification code, an alarm prompt message indicating that the operating data is wrong is fed back.

9. The distributed photovoltaic grid-connected safety protection system according to claim 8, characterized in that: Also includes: Extracting a second check code from the decrypted data; After determining that the third verification code is the same as the first verification code, the method further includes: Performing verification calculation on the initial decoded data according to a second preset verification algorithm to obtain a verification code of the initial decoded data, recorded as a fourth verification code; Determining whether the fourth verification code is the same as the second verification code; If the fourth check code is the same as the second check code, de-obfuscating the initial decoded data based on a preset obfuscation scheme to obtain decoded data; If the fourth verification code is different from the second verification code, an alarm prompt message indicating that the operating data is wrong is fed back.

10. A distributed photovoltaic grid-connected safety protection method, characterized in that: Applied to the distributed photovoltaic grid-connected safety protection system according to any one of claims 1 to 9, the method comprises: The information collection terminal collects the operating data of the distributed photovoltaic power station and its component equipment; The semantic coding module receives the operation data, semantically encodes and encrypts the operation data, and sends the encrypted coded data to the distributed photovoltaic grid-connected monitoring master station based on wireless transmission; The distributed photovoltaic grid-connected monitoring master station receives the encrypted coded data, decrypts and decodes the encrypted coded data to obtain decoded data, and monitors and analyzes the operation of the distributed photovoltaic power station based on the decoded data.

Images